settlementinstructionmanagerServicesLog.ICG.citigroup.net
- Citigroup Inc. -
Issued by Symantec Class 3 EV SSL CA - G3
About this certificate
This digital certificate with serial number 6f:b4:bf:b6:15:56:e3:a8:12:6e:b6:fd:9e:86:15:42 was issued on by Symantec Corporation.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Citigroup Inc.
Company registration number:
2154254
Organization: Citigroup Inc.
Organization unit: 33946
Organization: Citigroup Inc.
Organization unit: 33946
Address:
399 Park Avenue
Postal code: 10022
State / Province: New York
Locality: New York
Country: US
Postal code: 10022
State / Province: New York
Locality: New York
Country: US
Symantec Corporation
Organization:
Symantec Corporation
Organization unit: Symantec Trust Network
Organization unit: Symantec Trust Network
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 6f:b4:bf:b6:15:56:e3:a8:12:6e:b6:fd:9e:86:15:42Serial Number (int): 148482809333026033834926409465809212738
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a
Fingerprint (sha1): e9:b9:9c:62:d2:7e:7d:7e:f6:a4:ff:26:72:38:03:11:ec:18:38:53
Fingerprint (sha256): 16:75:c3:ad:49:6b:c1:4a:fb:e2:2f:42:68:19:36:78:f5:98:6c:cc:b6:8d:e3:0e:a3:d9:0d:36:b8:cd:eb:79
Issuing Certificate URL: http://sr.symcb.com/sr.crt
Revocation information
OCSP Server: http://sr.symcd.comCRL Distribution Point: http://sr.symcb.com/sr.crl
Check the revocation status for certificate settlementinstructionmanagerServicesLog.ICG.citigroup.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for settlementinstructionmanagerServicesLog.ICG.citigroup.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
settlementinstructionmanagerServicesLog.ICG.citigroup.net
Other certificates including the domain name citigroup.net
(limited to 100 certificates)
contentmanagementqa.globalwealthmanagement.citigroup.net
legalprocesscontrol.brazil.citigroup.net
wechatmediation.enterprise.citigroup.net
giftandentertainmentpreapproval.citigroup.net
uat2premediationassisted.enterprise.citigroup.net
dev.consumerloanapprovalsystem.ndm.korea.citigroup.net
uat.realtime.grosspayment.gateway.citigroup.net
ICGECCEUAPDR01.cob.citibankisrael.citigroup.net
securefiletransferuat.citigroup.net
alliancescreditinitiation.citibankaustralia.citigroup.net
ServiceCorporateactionsincomeUAT.icg.citigroup.net
esbuat.emeaconsumer.citigroup.net
banamexsoaperf.banamex.com
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
TRADERECORDSINDIAPRE.ICG.CITIGROUP.NET
securefiletransfer2.uat.citigroup.net
calldetailreporting.ti.citigroup.net
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
TaxReportingEngineUAT.icg.citigroup.net
dev.icgtoolbox.citigroup.net
webimaging.p2p.citigroup.net
sd-cd7f-c896.nam.nsroot.net
secureaccessweb.uat.nam.citigroup.com
securitiesbillinguat.gts.citigroup.net
TRACKING.COMMERCIALBUSINESSGROUP.CITIGROUP.NET
p2p.uat2.citigroup.net
uat2.wechatmediation.enterprise.citigroup.net
WEBSCANNING.CITIBANKINDIA.CITIGROUP.NET
esbuat.globalconsumerindia.citigroup.net
CUSTOMERCAREUNIT.CITIBANKINDIA.CITIGROUP.NET
citigroupsoauat.citigroup.net
citigroupsoasit1.citigroup.net
contentmanagementqa.globalwealthmanagement.citigroup.net
secureaccessweb.nam.citigroup.net
ARTEMIS.SG.CITIGROUP.NET
citigroup.net
calldetailreportingtest.ti.citigroup.net
securitiesbilling.gts.citigroup.net
stg.generalledger.west.citigroup.net
contentmanagement.globalwealthmanagement.citigroup.net
creditrisk.asia.citigroup.net
contentmanagement.globalwealthmanagement.citigroup.net
secureaccess.sit.nam.citigroup.net
websocketqa.americas.privatebank.citigroup.net
citigroupaiuat.citigroup.net
cob.assetservices.workbench.icg.citigroup.net
citipay.usprdnewcert.citigroup.net
federationservicesuat.ad.citigroup.net
shieldusrtprodsalesforce.citigroup.net
m.citiprivatebankinviewqa2.americas.privatebank.citigroup.net
uat.sgmarketplace.enterprise.citigroup.net
esbuat.globalconsumerindia.citigroup.net
financingsolutionscenter.citifinancial.citigroup.net
uat.structurednotes.citigroup.net
citiconnecttrademstr.apac.citigroup.net
settlementinstructionmanagerServicesLog.ICG.citigroup.net
tradeimagingindia.icg.citigroup.net
securitiesbilling.gts.citigroup.net
CPWMPRODSFDC.citigroup.net
citigroupaidev.citigroup.net
swiftmessageserviceuat.workbench.icg.citigroup.net
cob.directsalesagent8.citigroup.com
uat.privatebank.citigroup.net
secureaccessweb.nam.citigroup.net
webmonitoring.citidirect.citigroup.net
clientreportinguat.privatebank.asia.citigroup.net
webexternal.p2p.citigroup.net
citigroupaicob.citigroup.net
FundsOfHedgeFundsDEV.Workbench.icg.citigroup.net
verisignuat2normalmediationself.enterprise.citigroup.net
mexicoivr.nam.nsroot.net
AutomatedClearingSystemUAT.CitiSouthAfrica.Citigroup.net
citiuserReportingServiceuat.workbench.icg.citigroup.net
tradeimgindiapre.icg.citigroup.net
securefiletransfer.citigroup.net
esbuat.assistedservices.externalconsumeremea.citigroup.net
generalledger.west.citigroup.net
SettlementinstructionManager.UAT.ICG.citigroup.net
uat.citigroup.com
consumersit.api.citigroup.net
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
prod.sgmarketplace.enterprise.citigroup.net
clientdesktopuat.gts.citigroup.net
apac.intlcontentmanagement.citigroup.net
TRADERECORDSINFOASIA.ICG.CITIGROUP.NET
ISTCPWMSFDC.citigroup.net
uat1normalmediationself.enterprise.citigroup.net
gtsmiddleoffice.cob.cai.citigroup.net
calldetailreportingtest.ti.citigroup.net
settlementinstructionmanagerServicesAlert.ICG.citigroup.net
uat.nam.privatebank.citigroup.net
amlmonitoring.asiagts.citigroup.net
citipay.ccsadapteruat.citigroup.net
websocket.americas.privatebank.citigroup.net
websocketqa.americas.privatebank.citigroup.net
secureaccess.citigroup.net
consumeruat.api.citigroup.net
cititradeportal.citihandlowy.citigroup.net
CUSTOMERCAREUNIT.CITIBANKINDIA.CITIGROUP.NET
marketssecuritiesservicesdev.citigroup.net
legalprocesscontrol.brazil.citigroup.net
wechatmediation.enterprise.citigroup.net
giftandentertainmentpreapproval.citigroup.net
uat2premediationassisted.enterprise.citigroup.net
dev.consumerloanapprovalsystem.ndm.korea.citigroup.net
uat.realtime.grosspayment.gateway.citigroup.net
ICGECCEUAPDR01.cob.citibankisrael.citigroup.net
securefiletransferuat.citigroup.net
alliancescreditinitiation.citibankaustralia.citigroup.net
ServiceCorporateactionsincomeUAT.icg.citigroup.net
esbuat.emeaconsumer.citigroup.net
banamexsoaperf.banamex.com
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
TRADERECORDSINDIAPRE.ICG.CITIGROUP.NET
securefiletransfer2.uat.citigroup.net
calldetailreporting.ti.citigroup.net
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
TaxReportingEngineUAT.icg.citigroup.net
dev.icgtoolbox.citigroup.net
webimaging.p2p.citigroup.net
sd-cd7f-c896.nam.nsroot.net
secureaccessweb.uat.nam.citigroup.com
securitiesbillinguat.gts.citigroup.net
TRACKING.COMMERCIALBUSINESSGROUP.CITIGROUP.NET
p2p.uat2.citigroup.net
uat2.wechatmediation.enterprise.citigroup.net
WEBSCANNING.CITIBANKINDIA.CITIGROUP.NET
esbuat.globalconsumerindia.citigroup.net
CUSTOMERCAREUNIT.CITIBANKINDIA.CITIGROUP.NET
citigroupsoauat.citigroup.net
citigroupsoasit1.citigroup.net
contentmanagementqa.globalwealthmanagement.citigroup.net
secureaccessweb.nam.citigroup.net
ARTEMIS.SG.CITIGROUP.NET
citigroup.net
calldetailreportingtest.ti.citigroup.net
securitiesbilling.gts.citigroup.net
stg.generalledger.west.citigroup.net
contentmanagement.globalwealthmanagement.citigroup.net
creditrisk.asia.citigroup.net
contentmanagement.globalwealthmanagement.citigroup.net
secureaccess.sit.nam.citigroup.net
websocketqa.americas.privatebank.citigroup.net
citigroupaiuat.citigroup.net
cob.assetservices.workbench.icg.citigroup.net
citipay.usprdnewcert.citigroup.net
federationservicesuat.ad.citigroup.net
shieldusrtprodsalesforce.citigroup.net
m.citiprivatebankinviewqa2.americas.privatebank.citigroup.net
uat.sgmarketplace.enterprise.citigroup.net
esbuat.globalconsumerindia.citigroup.net
financingsolutionscenter.citifinancial.citigroup.net
uat.structurednotes.citigroup.net
citiconnecttrademstr.apac.citigroup.net
settlementinstructionmanagerServicesLog.ICG.citigroup.net
tradeimagingindia.icg.citigroup.net
securitiesbilling.gts.citigroup.net
CPWMPRODSFDC.citigroup.net
citigroupaidev.citigroup.net
swiftmessageserviceuat.workbench.icg.citigroup.net
cob.directsalesagent8.citigroup.com
uat.privatebank.citigroup.net
secureaccessweb.nam.citigroup.net
webmonitoring.citidirect.citigroup.net
clientreportinguat.privatebank.asia.citigroup.net
webexternal.p2p.citigroup.net
citigroupaicob.citigroup.net
FundsOfHedgeFundsDEV.Workbench.icg.citigroup.net
verisignuat2normalmediationself.enterprise.citigroup.net
mexicoivr.nam.nsroot.net
AutomatedClearingSystemUAT.CitiSouthAfrica.Citigroup.net
citiuserReportingServiceuat.workbench.icg.citigroup.net
tradeimgindiapre.icg.citigroup.net
securefiletransfer.citigroup.net
esbuat.assistedservices.externalconsumeremea.citigroup.net
generalledger.west.citigroup.net
SettlementinstructionManager.UAT.ICG.citigroup.net
uat.citigroup.com
consumersit.api.citigroup.net
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
prod.sgmarketplace.enterprise.citigroup.net
clientdesktopuat.gts.citigroup.net
apac.intlcontentmanagement.citigroup.net
TRADERECORDSINFOASIA.ICG.CITIGROUP.NET
ISTCPWMSFDC.citigroup.net
uat1normalmediationself.enterprise.citigroup.net
gtsmiddleoffice.cob.cai.citigroup.net
calldetailreportingtest.ti.citigroup.net
settlementinstructionmanagerServicesAlert.ICG.citigroup.net
uat.nam.privatebank.citigroup.net
amlmonitoring.asiagts.citigroup.net
citipay.ccsadapteruat.citigroup.net
websocket.americas.privatebank.citigroup.net
websocketqa.americas.privatebank.citigroup.net
secureaccess.citigroup.net
consumeruat.api.citigroup.net
cititradeportal.citihandlowy.citigroup.net
CUSTOMERCAREUNIT.CITIBANKINDIA.CITIGROUP.NET
marketssecuritiesservicesdev.citigroup.net
Certificate
The complete raw certificate details for settlementinstructionmanagerServicesLog.ICG.citigroup.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIQb7S/thVW46gSbrb9noYVQjANBgkqhkiG9w0BAQsFADB3 MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxKDAmBgNVBAMTH1N5bWFudGVj IENsYXNzIDMgRVYgU1NMIENBIC0gRzMwHhcNMTcwNDI0MDAwMDAwWhcNMTkwNDI1 MjM1OTU5WjCCASsxEzARBgsrBgEEAYI3PAIBAxMCVVMxGTAXBgsrBgEEAYI3PAIB AgwIRGVsYXdhcmUxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRAwDgYD VQQFEwcyMTU0MjU0MQswCQYDVQQGEwJVUzEOMAwGA1UEEQwFMTAwMjIxETAPBgNV BAgMCE5ldyBZb3JrMREwDwYDVQQHDAhOZXcgWW9yazEYMBYGA1UECQwPMzk5IFBh cmsgQXZlbnVlMRcwFQYDVQQKDA5DaXRpZ3JvdXAgSW5jLjEOMAwGA1UECwwFMzM5 NDYxQjBABgNVBAMMOXNldHRsZW1lbnRpbnN0cnVjdGlvbm1hbmFnZXJTZXJ2aWNl c0xvZy5JQ0cuY2l0aWdyb3VwLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBANa6i+GiyRJuUuH0Q1fv8CMPD6qIrvOcEyrpRQyYSOKOm6NAOMbjlpUD YUaO0x1P3zjNVe6ySexj8HAupQH5avqYKF9BRH39XO7WPvjJb8NeNrBNrjOoW42g IavJHA/6BfKy3j3C6z4x+kuvLLqhRZ3Cv7oC2c93G2QmbM4mCuJMCbiwlrwuv/gt rxyN9GJRIE+QEqU4rGo78ypLr4I6M4k6kectShH0lgucqIwjhfXyrU9WPq7EZpjJ Pe/3C9wdmaaFHFbkrriw3RRBq/U7BeqrAo8/ZeMKfhLNa3lqSVm4dSzPkegkNHA7 yg+B7XDUqz6UWoxtNwAMfWHKPsrzUZECAwEAAaOCAbEwggGtMEQGA1UdEQQ9MDuC OXNldHRsZW1lbnRpbnN0cnVjdGlvbm1hbmFnZXJTZXJ2aWNlc0xvZy5JQ0cuY2l0 aWdyb3VwLm5ldDAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwbwYDVR0gBGgwZjBbBgtghkgBhvhFAQcXBjBM MCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcC AjAZDBdodHRwczovL2Quc3ltY2IuY29tL3JwYTAHBgVngQwBATAfBgNVHSMEGDAW gBQBWavn3ToLWaZkY9bPIAdX1ZHnajArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8v c3Iuc3ltY2IuY29tL3NyLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGG E2h0dHA6Ly9zci5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zci5zeW1j Yi5jb20vc3IuY3J0MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQB0CxeV116WMohEEajqUHWV7WEJM4rlcfrP52Gso62O6PFZLEaPbTMM8Z91 NTGyvq+j8Hnm++jhLtEmsdeivlu5eieb8tigY2b6KAWpopjFS1TCrxTaK6f9wYmb TKwhCtm9+4T59GuuQXbWtNCEHLmTGupoecfGzmfnJL9RsRTvh8xhOwY2VgB+Oljd SGljfhhQnbAo/0BAOXoRBaLf2e3byfzhU67Srj1ZMyn5HosvY7JL2gF8zR7ouHzp TgL1F1z7OHZ2Vp2OUQyI8nV2HNhdnvO1bqsWBpLQ5nRL0OBiM4BMQOUxtqUPzDCn RxhWRCv8acfn0NfaX5CxPrI4Bp5d -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rqL4aLJEm5S4fRDV+/w Iw8Pqoiu85wTKulFDJhI4o6bo0A4xuOWlQNhRo7THU/fOM1V7rJJ7GPwcC6lAflq +pgoX0FEff1c7tY++Mlvw142sE2uM6hbjaAhq8kcD/oF8rLePcLrPjH6S68suqFF ncK/ugLZz3cbZCZsziYK4kwJuLCWvC6/+C2vHI30YlEgT5ASpTisajvzKkuvgjoz iTqR5y1KEfSWC5yojCOF9fKtT1Y+rsRmmMk97/cL3B2ZpoUcVuSuuLDdFEGr9TsF 6qsCjz9l4wp+Es1reWpJWbh1LM+R6CQ0cDvKD4HtcNSrPpRajG03AAx9Yco+yvNR kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 148482809333026033834926409465809212738 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Delaware' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2154254' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '10022' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '399 Park Avenue' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Citigroup Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '33946' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'settlementinstructionmanagerServicesLog.ICG.citigroup.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27106986726830383233504215246733429323283716364974803827346708266658515724448009026556978341395355331974153311169910474481715001317583057441533895354533419377704707114540338340000591362948607315774088346024532423797476092778581467651899086031713458557340481067586821874511637059221459303987802232123776731176327504485864286606694212415845235105838867086140178861624505121124844813977509368283906747094716303446730152636408441143029371900074892117725392368047471053785042695433795587636190424438468242545004042647641711349871811042556248211656609985099602015279343658637774883570344067606449209328226676413690486673809 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'settlementinstructionmanagerServicesLog.ICG.citigroup.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0159abe7dd3a0b59a66463d6cf200757d591e76a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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